This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c7416a7-bffc-304b-820f-8e5e1d6dc3a3.roa File: 5c7416a7-bffc-304b-820f-8e5e1d6dc3a3.roa (raw, json) Hash identifier: PQnHvdbcLXg9W87Ct8Jc+gEiisyMASsYAvHWT9IC0bs= Subject key identifier: D3:89:60:8C:84:64:71:17:33:3D:53:09:FB:4F:D4:60:8A:29:87:4A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D17BE7E366DCA147315F60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c7416a7-bffc-304b-820f-8e5e1d6dc3a3.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 98.17.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:7b:e7:e3:66:dc:a1:47:31:5f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=07d3795e-1af0-4df6-a1a9-e168a830613d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:22:f1:2c:7a:6a:23:ae:a2:e3:3c:ac:df:2d: 03:b2:09:5e:5e:00:f0:82:ec:be:76:5e:39:c2:8b: ab:3f:e2:3b:cf:c7:ca:c8:f3:2a:34:a0:66:7f:26: bc:97:be:af:e2:e8:cc:99:4c:b7:92:f8:df:5f:25: 66:d6:5c:ca:e4:1e:db:50:22:ac:c1:ed:2f:8e:c4: d9:ff:be:b5:a3:32:8a:7a:c0:bc:f6:e8:4b:bd:63: de:31:bd:0a:61:5a:ff:10:e5:d9:a2:8b:e7:0e:ab: f1:f5:dc:e1:d5:23:9b:8a:ce:31:6e:58:53:b9:cc: c8:af:96:27:b6:6d:fe:ae:7f:40:79:1e:1a:0a:09: 7d:6d:f3:c4:31:81:ed:5f:4a:3c:c4:0c:b6:03:37: 30:d0:bd:d6:9d:a7:8b:5a:23:4a:77:f8:61:1c:f9: b8:c8:ed:49:2a:23:80:5b:d1:d9:0b:75:0c:ff:4e: 8e:d1:7c:ad:ed:c2:f3:ea:07:72:87:4b:ff:58:a1: 91:c8:9a:51:c5:54:5f:f3:78:58:4f:4d:7a:4d:b1: 73:c5:71:3e:b6:4f:1c:36:cc:e4:76:d2:47:08:58: 0f:db:4c:58:08:aa:c6:1a:a7:f1:7d:d5:94:e0:ac: d6:92:b8:a5:43:8f:02:9c:d6:1f:d6:3f:db:68:58: e2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:89:60:8C:84:64:71:17:33:3D:53:09:FB:4F:D4:60:8A:29:87:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c7416a7-bffc-304b-820f-8e5e1d6dc3a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:2b:dc:df:ff:ec:13:56:eb:69:25:49:c8:d3:b7:36:d2:7b: 92:c4:73:b2:31:4c:2e:ce:38:31:e7:a4:46:89:35:a9:3d:00: 93:c9:d1:dc:7a:6a:cd:ec:07:5f:92:16:75:2a:c3:4d:bf:22: 1c:06:9b:08:97:97:a7:f4:a9:fc:03:f1:7a:71:4c:99:07:11: 1d:8e:14:f1:ea:ee:7f:f3:84:a6:2a:03:a5:89:88:e9:77:63: e4:da:94:5a:cb:dc:c9:89:aa:7a:50:82:8a:b5:81:48:c1:d1: 95:0c:be:53:f9:6e:48:74:f0:5e:a0:77:74:1f:bd:89:47:5a: 8f:94:25:c3:84:74:7b:24:c4:28:12:3e:a5:31:56:9f:4c:06: bd:81:77:5d:de:6f:09:68:da:b4:f5:53:83:5a:97:65:fe:54: 0c:de:48:63:c2:4e:bc:e0:6b:62:d8:49:94:5e:06:a2:d7:69: fe:57:af:ef:14:44:cc:10:c4:d3:ea:42:c3:25:df:b8:81:38: 8d:58:1a:f8:1c:67:15:1d:76:15:21:b2:3b:32:c6:8d:d3:55: 9b:85:42:ae:8c:8e:1b:d5:33:05:fd:c4:56:88:4a:e9:b2:ed: 0d:d0:2e:be:c4:2f:e7:a7:4b:50:65:b6:59:13:1a:61:56:c5: 58:3c:1e:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0Xvn42bcoUcxX2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk MDdkMzc5NWUtMWFmMC00ZGY2LWExYTktZTE2OGE4MzA2MTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SLxLHpqI66i4zys3y0DsgleXgDwguy+dl45 wourP+I7z8fKyPMqNKBmfya8l76v4ujMmUy3kvjfXyVm1lzK5B7bUCKswe0vjsTZ /761ozKKesC89uhLvWPeMb0KYVr/EOXZoovnDqvx9dzh1SObis4xblhTuczIr5Yn tm3+rn9AeR4aCgl9bfPEMYHtX0o8xAy2Azcw0L3WnaeLWiNKd/hhHPm4yO1JKiOA W9HZC3UM/06O0Xyt7cLz6gdyh0v/WKGRyJpRxVRf83hYT016TbFzxXE+tk8cNszk dtJHCFgP20xYCKrGGqfxfdWU4KzWkrilQ48CnNYf1j/baFji3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOJYIyEZHEXMz1TCftP1GCKKYdKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWM3NDE2YTctYmZmYy0z MDRiLTgyMGYtOGU1ZTFkNmRjM2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhHKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8r3N//7BNW62klScjTtzbSe5LEc7IxTC7OODHnpEaJNak9AJPJ0dx6 as3sB1+SFnUqw02/IhwGmwiXl6f0qfwD8XpxTJkHER2OFPHq7n/zhKYqA6WJiOl3 Y+TalFrL3MmJqnpQgoq1gUjB0ZUMvlP5bkh08F6gd3QfvYlHWo+UJcOEdHskxCgS PqUxVp9MBr2Bd13ebwlo2rT1U4Nal2X+VAzeSGPCTrzga2LYSZReBqLXaf5Xr+8U RMwQxNPqQsMl37iBOI1YGvgcZxUddhUhsjsyxo3TVZuFQq6MjhvVMwX9xFaISumy 7Q3QLr7EL+enS1BltlkTGmFWxVg8Hqo= -----END CERTIFICATE-----Generated at Sat Jan 10 04:23:06 2026 by rpki-client